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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underilnina and deleted text with strlkethrough, except where strike- 
through cannot be easily perceived, in which case the text of any deleted subject matter is 
shown by being placed within double brackets, as provided in 37 C.F.R § 1121(c)(2), The 
status of each claim is indicated with one of (original), (currently amended), (cancelled), 
(withdrawn), (new), (previously presented), or (not entered). 

1-7. (Cancelled) 

8. (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed mask values FMi^h> where q is an integer equal to three or more, wherein 
equation, FMo,h = ChXOR Llo (FMinh), and Ch= Ch,i5Ch,i4"^^Ch,o, are satisfied, where FMj,h is the i- 
th fixed value of the h-th set of said q sets of fixed mask values, where Fmffib -FMinh is a selected 
one of said fixed mask values, and where i is an integer, 

q sets of fixed S-box tables, wherein equations, (Coj XOR Cij) v (ci j XOR C2j) v...v (Cq-2j 
XOR Cq"ij) = (111 .,.11)2 and (doj XOR dij) v (dtj XOR d2j) v...v (dq-aj XORdq-^u) = (111... 11)2 are 
satisfied, a fixed S-box table before masking is defined as SJxli and i-th masked fixed S-box 
table is defined as S^ hM = S Fx XOR c ^l XOR ] dn.j for the j-th fixed value, where j is an integer; 

linear transform means L1i(x) and linear transform means L2i(x), wherein the linear 
transform means L1i(x), the nonlinear transform means with the masked fixed S-box table Sj,h 
and the linear transform means L2j(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed mask 
values in response to the random number h, 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value. 

9-34. (Cancelled) 

35, (previously presented) The encryption device according to claim 8, characterized 
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in tliat the linear transform means L1i(x) is defined as L1i(x) = x. 

36. (previously presented) The encryption device according to claim 8, characterized 
In that the linear transform means L2Kx) is defined as L2i(x) = MixedColumn(Shifl:{x)). 

37. (previously presented) The encryption device according to claim 8, diaracterized 
in that the linear transform means L2i(x) is defined as Shift(x). 

38. (currentiy amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1; 

q sets of fixed mask values FM^.h, where q is an integer equal to three or more, wherein 
equations, FMi.h- C^XOR L1i(L2M(Dh)) for iS:1, 0^= Ch.i5Ch.i4..-Ch.o, and 0^= dh.i5dM4.-dh.o, 
are satisfied > where i is an integer, 

q sets of fixed S-box tables, where equations, (Coj XOR Cij)v(cij XOR C2j)v,.. v(Cq-2j XOR 
Cq-tj) = (111l..11)2 and (doj XOR dij)v(dij XOR d2.j)v ..,v(dq"2j XOR dq^u) ^ {111l..11)2, are 
satisfied, and a fixed S-box table before masking is defined as Sjxl and an i-th masked fixed S- 
box table is defined as Sj.h IxL= Sfx XOR Ch j 1 XOR dy for the j-th fixed value, where j is an 
integer; 

linear tr-ansform means L1i(x) and linear transform means L2i(x), wherein the linear 
transform means L1|(x), the nonlinear transform means with the masked fixed S-box table %h 
and the linear transform means L2i{x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed mask 
values in response to the random number h; 

said XOR means XORing an input thereto wth an XOR of a key with said selected fixed 

value. 

39. (previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L1|{x) is defined as L1i(x) ^ x, 

40. (previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L2,(x) is defined as L2i(x) = 
MixedColumn(Shift(x)). 

41 . (previously presented) The encryption device according to claim 38, 
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characterized in that the linear transform means L2|(x) is defined as Shift(x). 

42-49. (Cancelled) 

50, (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising; 

a random number generator for generating a random number h, where h is an integer 
between zero and q-l ; 

q sets of masked fixed mask values FMi,h> where q is an integer equal to three or more, 
wherein equation, FMo.h = ChXOR L1o (FMinh), and Ch = Ch.isCn.M^-^Ch^o, are satisfied, where 
FMi h is the i-th fixed value of the h-th set of said q sets of fixed mask values, where FMinn is a 
selected one of said fixed mask values, and where i is an integer, 

q sets of fixed S-box tables, wherein equations } (Coj XOR Ci j) v (cij XOR C2j) v.,.v {Cc|-2j 
XOR c^-ij) = (111 ... 11)2 and (doj XOR dij) v (dij XOR dsj) v...v (dq-2j XOR d,^-ij) = (111 ...11)2 are 
satisfied, a fixed S-box table before masking is defined as SM. ^nd i-th masked fixed S-box 
table is defined as S].h IxL= I Sfx XOR Ch j1 XOR d Kj for the j-th fixed value, where j is an integer; 

a selector for selecting one of said q sets of fixed S-box tables in response to the random 
number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed S-box tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed S-box tables, the selector, linear transform means L1j(x) 
and linear transfomi means L2i(x), for that round, and wherein the fixed S-box tables for said 
plurality of respective encrypting rounds are identical, and wherein the linear transform means 
L1i{x), the nonlinear transfomi means with the masked fixed S-box table Sj^h and the linear 
transfonn means L2|(x) operate in that round. 

51 . (previously presented) The encryption device according to claim 50, 
characterized in tiiat the linear transform means L1i(x) is defined as L1i(x) = x. 

52. (previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L2i(x) is defined as L2i(x) = 
MixedColumn(Shifl:(x)). 

53, (previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L2|{x) is defined as Shifl:(x). 
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54. (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1; 

q sets of masked fixed masl< values FMj^h; where q is an integer equal to three or more, 
wherein equations, FM|,h = ChXOR 1- ^1 1 lL 2S^\M0h)) for Ch = Ch,i5Ch,i4- Ch.o, af^d Dh = d 
h,i5d h.i4. .d h.o> are satisfied, where FMi^h is the i-th fixed value of the h-th set of said q sets of 
fixed masl^ values, where i is an integer, 

q sets of fixed S-box tables, wherein equations, (coj XOR Cij) v (cij XOR Caj) v,-.v {Cq-2j 
XOR Cq-ij) ^ (111.. 11)2 and (dojXOR dij) v (dij XOR d2j) v...v (d^-sj XOR dq«ij) = (111. ,.11)2 are 
satisfied, a fixed S-box table before masking is defined as SJxl, and i-th masked fixed S-box 
table is defined as Sj,h Mj= tSFxXOR C hjl XOR d ]hj for the j-th fixed value, where j is an integer; 

a selector for selecting one of said q sets of fixed S-box tables in response to the random 
number h, 

said nonlinear transform means nonfinearly transforming an input thereto in accordance 
with said selected set of fixed S-box tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises ttie XOR means, the fixed S-box tables, the selector, linear transform means L1|{x) 
and linear transform means L2i(x), for that round, and wherein the fixed S-box tables for said 
plurality of respective encrypting rounds are identical, and wherein tine linear transform means 
L1 j(x), the nonlinear transfomi means with the masked fixed S-box table Sj^ and the linear 
transfomn means L2i(x) operate in that round, 

55. (previously presented) The encrypfion device according to claim 54, 
characterized in that the linear transform means L1i(x) is defined as L1i(x) = x. 

56. (previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L2i(x) is defined as L2i(x) = 

MixedColumn(Shift(x)), 

57. (previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L2i(x) is defined as Shift(x), 

58-63. (Cancelled) 
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64. {currently amended) An encryption device comprising a random number 
generator for generating a random number h, where h is an integer between zero and q-1, and a 
first plurality of encrypting rounds, \A^erein 

l-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed mask values FMj h, where q is an integer equal to three or more, wherein 
equations, FMo.h = Cn XOR L1o (FMinh), and Ch = Cji,i5Ch,i4..Xh,0r are satisfied, where FMi,h is the 
i-th fixed value of the h-th set of said q sets of fixed mask values,^where FMinh is a selected one 
of said fixed mask values, and, 

q sets of fixed S-box tables, wherein equations, (coj XOR Cij) v (Cij XOR C2j) v,,.v (Cq-2,j 
XOR Cq-i.j) ^ (111. „ 11)2 and {doj XOR dij) v (dij XOR dzj) v...v (dq-2j XOR d^-^u) = (111 .,.11)2 are 
satisfied, a fixed S-box table before masking is defined as SJx], and i-tti masked fixed S-box 
table is defined as Sj,h 1XL= ^Sfx XORCh ]1 XOR d Jhj forthe j-th fixed value, where j is an integer; 

a selector for selecting one of said q sets of fixed mask values in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1i{x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
accordance with a fixed S-box table; 

linear transform means L2i(x), wherein the linear transform means L1i(x), the nonlinear 
transfonn means with the masked fixed S-box table Sj.h and the linear transform means L2i(x) 
operate in that round; and 

a selector for selecting one of said plurality of nonlinear transfomd means. 

65. (previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L1i(x) is defined as L1j(x) = x. 

66. (previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L2j(x) is defined as L2i{x) = 
MixedCoiumn(Shift{x)). 
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67. (previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L2i(x) is defined as ShifE(x), 

68. (cuirently amended) An encryption device comprising a random number 
generator for generating a random number h, where h is an integer between zero and and a 
first plurality of encrypting rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlineariy transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed mask values FMi^h, where q is an integer equal to three or more, wherein 
equations J FMi.h ^ Ch XOR L1](L2M(Dh)) for Ch = Ch.i6Ch.i4^--Ch.o, and D(, = dh.i6dh.i4-^^d h,o, 
are satisfied, where FMi h is the i-th fixed value of the h-th set of said q sets of fixed mask values, 

q sets of fixed S-box tables, wherein equations yjCo,\ XOR Cij) v (cij XOR c^j) v,..v (Cq-2j 
XOR Cq-ij) = (111, ,.11)2 and (doj XOR dij) v (dij XOR daj) v..v (dq-2j XOR d^-ij) = (111. ..11)2 are 
satisfied, a fix^ S-box table before masking is defined as Sjxl. and i-th masked fixed S-box 
table is defined as S].hM-= IS^LXORChj] XOR d }hj for ttie j-th fixed value, v\^ere j is an integer; 

a selector for selecting one of said q sets of fixed mask values in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1i(x); 

a plurality of nonlinear transform means for nonlineariy transfomning an input rn 
accordance wth a fixed S-box table; 

linear transform means L2i{x), wherein the linear transform means L1j(x), the nonlinear 
transfonn means with the masked fixed S-box table S^u and the linear transform means L2i(x) 
operate in that round; and 

a selector for selecting one of said plurality of nonlinear transform means. 

69. (previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L1i(x) is defined as L1i(x) - x. 

70. (previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L2i(x) is defined as L2i(x) = 
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MixedColumn(Shift(x)). 

71 . {previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L2i(x) is defined as Shift(x), 

72, (cunrentiy amended) A program stored on a computer or machine-readable 
storage medium for use in an encryption device, said program operable to effect the steps of: 

selecting one set of q sets of fixed mask values FMi h, where q is an integer equal to 
three or more, in response to a random number h, where h is an integer between zero and q-1 ; 

XORing an input value with an XOR of a key with said selected fixed value in i-th one of 
rounds, wherein equations, FMo.h = Cn XOR L1o (FMinh) and Ch = Ch,i6Oh,i4- -Ch,07 are satisfied, 
where FMj h is the i-th fixed value of the h-th set of said q sets of fixed mask values, where FMinh 
is a selected one of said fixed mask values and where i is an integer; 

selecting one set Sj^h of q sets of masked fixed S-box tables in response to the random 
number h in that round, wherein equations, {coj XOR Ci j) v (cij XOR c^j) v„,v (Cq-^j XOR Cq-ij) = 
(111. .,11)2 and (dojXOR dij) v (dij XOR daj) v...v (d<|-2.iXOR dq-ij) = (111 ...11)2 are satisfied, a 
fixed S-box table before masking is defined as SJxl, and i-th masked fixed S-box table is defined 
as Sj,hM - |Sfx XOR Ch jl XOR d for the j-th fixed value, where j is an integer; 

nonlinearly transforming an input value in accordance with said selected set Sj.h of fixed 
S-box tables in that round; and 

linearly transforming an input value and the nonlinearly transformed value in that round. 
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